Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/sTD4XhldQ681Wvom9Uz9uNPnVf4.roa
File: sTD4XhldQ681Wvom9Uz9uNPnVf4.roa (raw, json)
Hash identifier: SCx+EQqjzZ1FgRAE/qvO9L4fV8Oi3+FBCVWS/oHygcA=
Subject key identifier: B1:30:F8:5E:19:5D:43:AF:35:5A:FA:26:F5:4C:FD:B8:D3:E7:55:FE
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 052C32A8
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/sTD4XhldQ681Wvom9Uz9uNPnVf4.roa
Signing time: Mon 20 Jun 2022 13:40:44 +0000
ROA not before: Mon 20 Jun 2022 13:40:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 141.11.44.0/22 maxlen: 24
141.11.40.0/22 maxlen: 24
141.11.39.0/24 maxlen: 24
141.11.42.0/24 maxlen: 24
141.11.41.0/24 maxlen: 24
141.11.45.0/24 maxlen: 24
141.11.47.0/24 maxlen: 24
141.11.46.0/24 maxlen: 24
141.11.2.0/24 maxlen: 24
141.11.1.0/24 maxlen: 24
141.11.0.0/24 maxlen: 24
141.11.10.0/23 maxlen: 24
141.11.17.0/24 maxlen: 24
141.11.22.0/24 maxlen: 24
141.11.21.0/24 maxlen: 24
141.11.18.0/24 maxlen: 24
141.11.25.0/24 maxlen: 24
141.11.31.0/24 maxlen: 24
141.11.28.0/24 maxlen: 24
141.11.37.0/24 maxlen: 24
141.11.33.0/24 maxlen: 24
141.11.35.0/24 maxlen: 24
141.11.32.0/24 maxlen: 24
141.11.160.0/24 maxlen: 24
141.11.176.0/24 maxlen: 24
141.11.182.0/23 maxlen: 24
141.11.92.0/22 maxlen: 24
141.11.232.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86782632 (0x52c32a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jun 20 13:40:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b130f85e195d43af355afa26f54cfdb8d3e755fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c6:be:72:8d:08:04:f5:75:16:4d:25:8f:f0:
93:98:aa:21:90:54:9d:18:31:72:c8:f8:50:b3:01:
01:73:bd:6d:7e:d0:00:2f:c7:d1:2a:67:51:c5:f3:
23:84:5c:99:08:42:64:0b:96:77:97:67:71:32:bc:
7b:33:55:0e:33:72:c7:57:02:f6:ab:d8:2c:61:0b:
f6:d4:e0:94:0d:04:bc:db:02:d0:83:d0:bd:01:8e:
b6:1e:6c:dc:b3:c8:27:0c:ca:a1:75:f1:12:12:8b:
98:1c:7a:ac:73:7b:41:0b:50:cf:22:4d:5f:90:b8:
c8:c2:60:60:ca:8c:b2:47:38:c6:3a:34:39:81:fc:
53:d4:18:2b:15:bc:58:0d:ce:b5:a0:8c:c8:4e:08:
a1:93:79:1e:e7:70:46:8d:60:6d:b9:e6:7b:76:a4:
35:bd:36:c6:8c:d9:00:5a:c6:a2:b0:ea:72:50:d3:
78:0e:01:35:d3:62:2e:ab:b7:6d:30:bb:ce:0d:53:
34:e8:1b:53:90:95:b8:e0:98:a4:dd:66:9a:fa:bd:
79:91:98:07:8a:bc:3a:74:69:ef:51:e9:9e:41:d1:
06:83:f9:f3:27:7c:c4:38:ea:9b:f9:59:bb:cd:a8:
da:bd:f8:54:79:94:db:9a:40:08:85:4c:15:e1:e4:
13:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:30:F8:5E:19:5D:43:AF:35:5A:FA:26:F5:4C:FD:B8:D3:E7:55:FE
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/sTD4XhldQ681Wvom9Uz9uNPnVf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.0.0-141.11.2.255
141.11.10.0/23
141.11.17.0-141.11.18.255
141.11.21.0-141.11.22.255
141.11.25.0/24
141.11.28.0/24
141.11.31.0-141.11.33.255
141.11.35.0/24
141.11.37.0/24
141.11.39.0-141.11.47.255
141.11.92.0/22
141.11.160.0/24
141.11.176.0/24
141.11.182.0/23
141.11.232.0/23
Signature Algorithm: sha256WithRSAEncryption
29:b9:63:7e:08:b4:1d:ab:03:38:68:8e:00:91:cf:22:6f:a0:
1b:01:74:5d:58:42:a2:82:27:cb:11:37:0f:e6:b5:55:a2:91:
e8:0c:e1:66:80:92:af:1f:bf:01:5a:34:de:4d:4e:6d:42:c2:
e6:c6:e2:14:08:bb:bd:23:5e:4f:2a:6d:72:5b:95:b9:bf:df:
01:36:94:00:40:e5:11:e8:1b:50:a4:d7:5f:ab:dc:58:8b:60:
e2:91:36:68:6e:98:ea:9c:06:0c:13:f2:8f:17:df:8c:2c:82:
75:d9:05:03:66:a8:64:0e:1f:27:5b:2f:05:e3:53:d9:e4:c4:
94:f4:09:6c:c2:90:1b:4e:00:c2:59:e7:cd:ef:88:8b:4f:92:
fb:23:ce:32:c3:c1:31:92:3e:0d:a4:e6:46:64:25:91:5e:5f:
2d:18:09:6c:d1:ac:94:cb:bb:0c:c0:39:dc:03:fd:22:4e:b8:
1a:d9:a3:66:cf:49:d5:32:05:75:de:e5:fc:7a:da:4f:70:d1:
65:ef:2c:b8:a6:61:3a:39:04:92:50:85:fe:16:82:cf:1d:54:
48:13:8f:c5:9d:e4:12:f7:dc:d7:fe:b9:d3:bb:e3:71:94:e0:
99:5e:43:ef:53:97:93:6a:59:dd:f9:7f:45:fb:ab:c1:0c:2b:
15:52:00:2c
-----BEGIN CERTIFICATE-----
MIIFbzCCBFegAwIBAgIEBSwyqDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzRjNzk4NmIxODJlY2MzNmFkNzRjNTM1YmVhZTcyOTliMzVjZTkyMB4XDTIyMDYy
MDEzNDA0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjEzMGY4NWUxOTVk
NDNhZjM1NWFmYTI2ZjU0Y2ZkYjhkM2U3NTVmZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK7GvnKNCAT1dRZNJY/wk5iqIZBUnRgxcsj4ULMBAXO9bX7Q
AC/H0SpnUcXzI4RcmQhCZAuWd5dncTK8ezNVDjNyx1cC9qvYLGEL9tTglA0EvNsC
0IPQvQGOth5s3LPIJwzKoXXxEhKLmBx6rHN7QQtQzyJNX5C4yMJgYMqMskc4xjo0
OYH8U9QYKxW8WA3OtaCMyE4IoZN5HudwRo1gbbnme3akNb02xozZAFrGorDqclDT
eA4BNdNiLqu3bTC7zg1TNOgbU5CVuOCYpN1mmvq9eZGYB4q8OnRp71HpnkHRBoP5
8yd8xDjqm/lZu82o2r34VHmU25pACIVMFeHkE0ECAwEAAaOCAokwggKFMB0GA1Ud
DgQWBBSxMPheGV1DrzVa+ib1TP240+dV/jAfBgNVHSMEGDAWgBRsTHmGsYLsw2rX
TFNb6ucpmzXOkjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JFeDVockdDN01OcTEweFRXLXJuS1pzMXpwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWYvYzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8x
L3NURDRYaGxkUTY4MVd2b205VXo5dU5QblZmNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYv
YzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8xL2JFeDVockdDN01O
cTEweFRXLXJuS1pzMXpwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
ngYIKwYBBQUHAQcBAf8EgY4wgYswgYgEAgABMIGBMAsDAwCNCwMEAI0LAgMEAY0L
CjAMAwQAjQsRAwQAjQsSMAwDBACNCxUDBACNCxYDBACNCxkDBACNCxwwDAMEAI0L
HwMEAY0LIAMEAI0LIwMEAI0LJTAMAwQAjQsnAwQEjQsgAwQCjQtcAwQAjQugAwQA
jQuwAwQBjQu2AwQBjQvoMA0GCSqGSIb3DQEBCwUAA4IBAQApuWN+CLQdqwM4aI4A
kc8ib6AbAXRdWEKigifLETcP5rVVopHoDOFmgJKvH78BWjTeTU5tQsLmxuIUCLu9
I15PKm1yW5W5v98BNpQAQOUR6BtQpNdfq9xYi2DikTZobpjqnAYME/KPF9+MLIJ1
2QUDZqhkDh8nWy8F41PZ5MSU9AlswpAbTgDCWefN74iLT5L7I84yw8Exkj4NpOZG
ZCWRXl8tGAls0ayUy7sMwDncA/0iTrga2aNmz0nVMgV13uX8etpPcNFl7yy4pmE6
OQSSUIX+FoLPHVRIE4/FneQS99zX/rnTu+NxlOCZXkPvU5eTalnd+X9F+6vBDCsV
UgAs
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:17 2023 by rpki-client on console-fra.rpki-client.org